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^ : 

' Abstract. A pair of points in a ricmannian manifold makes a 

secure configuration if the totality of geodesies connecting them 
' can be blocked by a finite set. The manifold is secure if every 

,__|. configuration is secure. We investigate the security of compact, 

' locally symmetric spaces. 

■3: 

g ! 1. Introduction: The setting and the main results 

Let M be a complete riemannian manifold.^ By a geodesic 7 C M 
I ■ we will mean a geodesic curve t 1— > 7(t), where t G / is the arclength 

^ , parameter, and / C M is an arbitrary interval. Mostly, we will be 

concerned with the situation / = [a,b], i. e., 7 is a geodesic segment 
' with the endpoints x = 7(a), ?/ = 7(6). 

00 ; 

O . Definition 1. Let x,y E M be arbitrary points. A connecting geodesic 

^ ! is a geodesic segment 7 with the endpoints x, y, and such that 7 does 

^ I not contain either x or y in its interior. 

> ■ 

' By a configuration in M we will mean any unordered pair of points, 

n . {x,y}. Let a : M X M M X M he the involution (j{x,y) = {y,x). 

>■ ! The space of configurations is the quotient C(M) = (Mx M)/a. Thus, 

'^pj \ C{M) is the symmetric square of M, and it inherits from M a topology, 

■ a differentiable structure, a measure class, etc. If M carries a group 

action, then the group, G, naturally acts on C(M). We will say that 
two configurations {x,y}, {x',y'} G C(M) are conjugate if {x',y'} = 
g ■ {x, y} for some g E G. 

Let z G M and let 7 be any geodesic. We say that 7 passes through 
2; if 7 contains z in its interior. Let F be any collection of geodesies in 
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^Most of the preliminary material is valid in greater generality |21 E]. Since 
locally symmetric spaces fit into the riemannian framework, we will restrict our 
discussion to this setting. 
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M and let F C M be a subset. We say that F is a blocking set for F 
if every geodesic in F passes through a point of F. 

Definition 2. Let T{x,y) he the collection of connecting geodesies for 
a configuration {x,y}. We say that {x,y} is a secure configuration if 
there exists a finite blocking set forT{x, y) . Otherwise the configuration 
is insecure. The manifold M is secure if every configuration {x,y} is 
secure. 

If M is secure, and any collection F(x,?/) can be blocked by a set 
of at most n points, we say that M is uniformly secure. The smallest 
such n is the security threshold of M. 

In a geometric optics interpretation, a configuration is secure if one 
of the points can be shaded from the light emanating from the other 
by a finite number of point screens. Thus, our setting is closely related 
to the problem of illumination 14^ . Another obvious interpretation of 
Definition |21 suggested the name "security" . 

Since the security of configurations concerns the global properties of 
geodesies, it is instructive to investigate the possibilities and to com- 
pare various spaces from this viewpoint. The work [6. did this for a 
particular class of planar polygons, the lattice polygons. The geodesies 
(i.e., the billiard orbits) in a lattice polygon have a striking behavior: 
a geodesic is either finite or uniformly distributed. It is the direction 
of the geodesic that determines which of the two possibilities happens. 

The name lattice polygons is due to the fact that any polygon, P, in 
this class defines a nonuniform lattice G{P) C SL(2, M). Such a lattice 
is either arithmetic (i.e., commensurable with SL(2,Z) C SL(2,M)) or 
nonarithmetic. Accordingly, P is either an arithmetic or a nonarith- 
metic polygon jHj. By a theorem in 0, a lattice polygon is secure iff 
it is arithmetic. Regular polygons are lattice polygons [1^]. By jH] and 
|16j . a regular n-gon is secure iff n = 3,4,6. Thus, any regular n-gon 
other than the equilateral triangle, the square and the regular hexagon, 
is insecure. 

A space M is insecure iff M has at least one insecure configuration. It 
is natural to analyze insecure spaces by classifying their configurations 
from the security viewpoint; the paper |7| does this for nonarithmetic 
lattice polygons of small genus. In view if the results of [7^, it is plau- 
sible that almost all configurations in a nonarithmetic lattice polygon 
are insecure. 

In this work we investigate the security of a well known class of 
riemannian manifolds: compact, locally symmetric spaces. Let M be 
one. Then M = S/T, where S" is a simply connected symmetric space, 
and F is a discrete, cocompact group of isometrics freely acting on S. 
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The space S uniquely decomposes, S = SqX S- x S+, into a product of 
simply connected symmetric spaces of euclidean type, noncompact type, 
and compact type respectively [lOj. If M = S/T where S belongs to 
one of the three types, we say that M is a compact, locally symmetric 
space of that type. 

We will now formulate the main results of this work. 

1. Any configuration in a compact, locally symmetric space of the 
noncompact type is insecure. See Theorem ^ 

2. Let M be a (necessarily compact) locally symmetric space of com- 
pact type. We define the notion of regular/singular configurations. The 
set of regular configurations is open and dense. Then: i) Any regular 
configuration is secure. The security threshold of regular configura- 
tions is 2"^^^'^^; ii) There are always singular configurations which are 
insecure. See Theorem |3| 

3. Let M be an arbitrary compact, locally symmetric space. Then M 
is secure iff it is of euchdean type. If M is of euclidean type, then it 
is uniformly secure, and its security threshold is bounded in terms of 
dim(M). See Theorem [7| and Corollary |S| 

The organization of the paper is as follows. In Section |21 we col- 
lect basic facts, in particular on the security and coverings. There 
we also establish the security of locally symmetric spaces of euclidean 
type. In Section El we investigate the configurations in a compact, lo- 
cally symmetric space of the noncompact type, and prove Theorem ^ 
In Section HI we study the security of spaces with a compact group 
of isometrics. Theorem |^ gives a sufficient condition for insecurity of 
such spaces. Then we apply this material to locally symmetric space 
of the compact type, and prove Theorem El Subsections 14.41 and 14.51 
illustrate Theorem El by examples. In section we consider compact 
symmetric spaces of rank one. Using Theorem EJ we characterize their 
configurations from the security viewpoint. In section H7S1 we investi- 
gate compact, semisimple Lie groups endowed with double-invariant 
riemannian metrics (symmetric spaces of type II fl]). Theorem El is a 
direct corollary of Theorem El In Section El we consider arbitrary com- 
pact, locally symmetric spaces, and prove Theorem [71 and Corollary El 

2. Preliminaries 

We first discuss riemannian coverings from the security viewpoint. 
This material is used in Section HI Then we recall the basic material on 
symmetric spaces, in general. We will give more detailed presentations 
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separately for the noncompact and the compact type. See sections ITTl 
and 14.11 respectively. 

2.1. Security and coverings. Let X,Y be complete, connected rie- 
mannian manifolds, and let p : X ^ F be a differentiable mapping 
which is onto, and is a local isometry. Then p is a topological covering. 
To hmit our discussion to the security context, we assume that X is 
compact, and hence p is a finite covering.^ 

Proposition 1. Let p : X Y be as above. A configuration {x,y} 
in Y is secure iff all configurations {x,y} in X, with x G y G 

p~^{y), are secure. 

Proof. Let d be the degree of the covering, and let x,y & Y he arbitrary. 
Then 

(1) p"^(r(x,?/)) = u£ep-i(^),^gp-i(j,)r(x,y). 

Let F C F be a blocking set for {x,y}. Then, by eq. [H F = p~^{F) 
blocks the union of T{x,y) over x G p~^{x), y G p~^{y). Since |F| = 
d\F\ < oo, all these configurations are secure. This proves one im- 
phcation. To prove the converse, set p~^{x) = {xi, . . . ,Xd}, P^^iy) = 
{yi, . . . , yd}- For 1 < i, i < d let Fjj C X be a blocking set for T{xi, yf). 
By eq. m F = p(UijFij) blocks r(x, y), and |F| < Y,i,j < ■ 

The statement below is immediate from Proposition Q and its proof. 

Corollary 1. Let p : X Y be a covering of compact, riemannian 
manifolds. Then 

1. One of the manifolds is (uniformly) secure iff the other one is; 

2. Suppose that Y is insecure, and let {x,y} G C{Y) be an insecure 
configuration. Then there exist x G p~^{x), y G p~^{y) such that the 
configuration {x,y} G C{X) is insecure. 

2.2. Symmetric and locally symmetric spaces. We will denote 
Lie groups by capital latin letters, and their Lie algebras by the cor- 
responding lower case gothic letters. Thus, if G is a Lie group, then q 
is the Lie algebra of G. We denote by Go C G the connected compo- 
nent of identity. We refer the reader to fOl 1^ for the background on 
symmetric spaces. Lie groups, and Lie algebras. See also p!2j . 

•^The material below is valid in the more general framework of geodesic coverings 
Topological coverings suffice for our purpose, and we restrict the discussion 
to them. 
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A (riemannian, globally) symmetric space is a complete, homoge- 
neous riemannian manifold, S = G/K, where G is a connected Lie 
group with an involutive automorphism, a : G ^ G, and i^" C G is 
(essentially) the fixed point set of a. We will use the same notation 
for the induced automorphism of the Lie algebra. The automorphism, 

• S) has eigenvalues ±1, and let g = t + p be the decomposi- 
tion of the Lie algebra into the eigenspaces of a. The eigenspace p is 
naturally identified with the tangent space T^S at the reference point 
o = eK G S. The involution a : G ^ G descends to an isometry 
So ■ S ^ S such that = 1, So(o) = o and So\ToS = —Id. Thus, 
So is the geodesic symmetry of S with respect to the reference point. 
The action of G on S* gives rise to the geodesic symmetries Sx ■ S ^ S 
where x & S is arbitrary. 

The property of having a geodesic symmetry for every point can 
be used as a definition of symmetric spaces ^T]. We assume that G 
acts faithfully on S, i. e., G C Iso(S'). Then K is compact, and G 
is a reductive Lie group. The Lie algebra q has a unique a-invariant 
decomposition = 0o © 0- © S+ where go is the center of g and g_, g+ 
are noncompact and compact semisimple Lie algebras respectively. If 
= 00 (0 = 0-) = 0+)) we say that the symmetric space 5* is 
of euchdean type (noncompact type, compact type). A symmetric 
space of the euclidean type satisfies 5*0 = M"/r, where F C M"" is a 
discrete subgroup. The structure of a symmetric space of either type 
is described via root decompositions of the corresponding Lie algebras. 
We will recall this material separately for the spaces of noncompact 
f section IXT|) and compact type (section U?T]). 

An irreducible symmetric space necessarily belongs to one of the 
three types. The general symmetric space decomposes (at least lo- 
cally) as a cartesian product, 5* = 6*0 x S*- x 5+, of symmetric spaces of 
euclidean, noncompact, and compact type.^ Locally symmetric (com- 
pact) spaces associated with the symmetric space 5* = G/K are of the 
form M = T \ S, where F C G is a discrete (cocompact) subgroup 
freely acting on S. If M is a locally symmetric space, and S belongs 
to a particular type, we will say that M is a locally symmetric space 
of the corresponding type. 

We dispose of the euclidean type in the subsection below. In the 
following two sections we study the security of locally symmetric spaces 
of the noncompact and the compact type respectively. 



■^This decomposition certainly exists (and is unique) if S is simply connected 

nni- 
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2.3. Security of locally symmetric spaces of euclidean type. 

A compact, locally symmetric space of euclidean type is of the form 
M" = R'^/r, where F C Iso(M"') is a cocompact, freely acting, discrete 
subgroup. A finite covering of M" is a fiat torus of dimension n. 

Proposition 2. Any compact, locally symmetric space of euclidean 
type is uniformly secure; there is a bound on security thresholds of these 
spaces, depending only on n. If is a flat torus, then the security 
threshold is 2". 

Proof. The case n = 2 is contained in [H], Lemma 1. The same aproach 
works for any n. We outline it below. 

By the Bieberbach theorem, M" has a finite covering by a fiat torus; 
moreover, the degree of the covering is bounded above in terms of n. In 
view of Corollary ^ it sufiices to consider the case = M^/F, where 
F C M" is a lattice. 

Affine transformations M g ■ M preserve the set of geodesies in 
M. Thus, the claim holds for M iff it holds for any g ■ M. Using an 
appropriate g, we can assume that M = M"/Z", the standard torus T" 
of n dimensions. Let o G T*^ be the origin. By homogeneity, it suffices 
to consider the configurations {o,x}. 

There is a one-to-one correspondence between the geodesies 7 e 
r{o,x) and the straight segments jx+z in connecting the origin 
e M" with the points x + z, z G Z". Let 7^^4.2 G F(o, x) be the 
corresponding connecting geodesic. If p : R" —>■ is the projection, 
then ■jx+z = pilx+z)- The midpoint of the segment jx+z is ^+z/2 G M". 
Set F{x) = {| + z/2 : z E Z"}. Then the set F{x) = p{F{x)) C T" 
is finite, and = 2"'. Thus, 2" points sufiice to block any F(o, x). 

On the other hand, for a typical x, we cannot block F(o, x) with less 
than 2" points. We leave the verification of this to the reader. ■ 

3. Compact locally symmetric spaces of noncompact type 

We begin by presenting preliminaries, and establishing notation. 

3.L Symmetric spaces of noncompact type. A symmetric space 
of noncompact type satisfies S = G/K, where G = ^00(5*) is a non- 
compact, semisimple Lie group, and is a maximal compact subgroup. 
The subgroup K <Z G is defined up to conjugation; there is a one-to-one 
correspondence between the choices of K and the choices of a reference 
point in S. It will be convenient to consider any point x E S a. reference 
point. 

We will denote by g = 6 + p the Cartan decomposition corresponding 
to X G S*; here t is the Lie algebra of K, and p ~ TxS. The Riemannian 
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exponential map, Exp : p S, and the Lie group exponential map, 
exp : Q ^ G, are related by Exp (if) = exp(if) ■ x. A flat, X C S', is a 
totally geodesic submanifold, isometric to a euclidean space. If a C p 
is a maximal abelian subalgebra, then Exp(a) = exp(o) • x C 5" is a 
maximal flat. Varying x G S" and a C p, we obtain all maximal flats in 



We will use the standard material (and the standard notation) on 
root systems and the root decompositions fOI E]- Thus, a maximal 
abelian subalgebra a C p gives rise to the root decomposition 



For a root A G A, the root vector is the unique element H\ G a such 
that X{H) =< H\, H > for all H E a. Weyl chambers are the con- 
nected components of (a\ IJasa -^a")- Every vector if G p is contained 
in a maximal abelian subalgebra a C p, and all maximal abelian sub- 
algebras of p are iT-conjugate. Thus, the set {A(if) : A G A} C M does 
not depend on the choice of a; it is the set of nontrivial eigenvalues 
of the symmetric linear transformation ad{H) : ^ [H (2.7.1)]. A 
vector if G p is regular iff it is contained in a unique maximal abelian 
subalgebra o, iff A (if) 7^ for all A G A, iff if belongs to a unique 
Weyl chamber piU li]. 

A symmetric space of noncompact type is a Hadamard manifold, 
i. e., S" is a complete, simply connected riemannian manifold of non- 
positive sectional curvature. We will use the standard properties of 
Hadamard manifolds f4]. For two points x,y E S there exists a unique 
geodesic, [x, y], from x to y. Let J C M be an arbtrary interval, and let 
g,h : J ^ S he two geodesies parametrized by the arclength. Then the 
distance function t hH> d{g(t), h{t)) on J is convex. Two geodesic rays 
7,(7 : R+ — >• S are asymptotic if d('y{t),a(t)) is bounded as t ^ +00. 
The ideal boundary dooS of the symmetric space 5* is the set of classes 
of asymptotic geodesic rays. We denote by 7(0x3) G dooS the boundary 
point corresponding to the geodesic ray 7. 

Denote by T^S the unit tangent bundle of S, and by T^S C T^S 
its fiber at a; G 5. Let v G T^S. Let if G p be the vector corre- 
sponding to V via an isomorphism p ^ T^S, and let a C p be a max- 
imal abelian subalgebra containing if. By preceding remarks, the set 
Eig(t>) = {A(if) : A G A} is well defined. This correpondence defines 
a continuous (with respect to the Hausdorff distance) set valued func- 
tion Eig(t>) on T^S. Hence, the function Xq{v) = min{| I \: I E Eig(t>)} 
is well defined and continuous on T^S. For any v G T^S* we have 
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Ao(f) > 0; a vector v is regular ii Xq{v) > 0. The regularity of ele- 
ments V & T^S agrees with the regularity for vectors if G p. 

The set- valued function Eig on T^S is invariant under the action of G 
and under the geodesic flow. Therefore Eig(f), v &T^S, is determined 
by the geodesic 7 = Exp(tt>). Moreover, Eig(f) depends only on the 
point 7(cx3) e dooS. In view of these remarks, Aq uniquely descends to 
a continuous function Aq : dooS M+ U {0}. The notion of regularity 
for tangent vectors v E T^S defines the regularity for boundary points 
^ G dooS. By remarks above, a point ^ G dooS is regular iff Ag (^) > 0. 

A regular point ^ E dooS and any point x E S determine the horocy- 
cle HC{^,x). (Compare with |1[ pp. 105-108]). Let 7 be the geodesic 
from X to ^, and let v = 7(0) G T^S. Let = p + 6 be the Cartan 
decomposition corresponding to x, and let if G p be the vector corre- 
sponding to V. Then H is regular, and let a C p be the unique maximal 
abelian subalgebra containing H. Since H is regular, it is contained 
in a unique Weyl chamber; let C A be the corresponding set of 
positive roots, i. e. A G iff X{H) > 0. Set 

n = &x, 

AeA+ 

and let = exp(n) C G be the corresponding nilpotent subgroup. 
Then HC{^,x) =N-xcS. 

Remark 1. Let x G S* be arbitrary. Every horocycle containing x has 
the form HC{k^,x), where k E K, the isotropy group of x. Therefore 
the set of horocycles passing through x is compact. 

For X E S and r > let Br{x) C S* be the ball of radius r centered at 
X. For x,y E S and r > set SH{x, y,r) = {u E S : [x, u]nBr{y) 7^ 0}. 
The set SH{x,y,r) C S" is the shadow of the ball Br{y) produced by 
the light emitted from x. Let s > 0. We will call the intersection 
SH{x,y,r) fl Bs{y) a restricted shadow. 

3.2. Any configuration is insecure: Outline of the proof. Let 

M = S/r be a compact, locally symmetric space of noncompact type. 
Thus, 5* = M is a simply connected, noncompact symmetric space, and 
r C I{S) is the deck group of the covering tt : S ^ M. The following 
is the main result of this section. 

Theorem 1. Let M be a compact locally symmetric space of noncom- 
pact type, let x,y E M and let F G M \ {x,y} be a finite set. Then 
there exists a geodesic h eT{x, y) such that hn F = ^. 
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For the benefit of tlie reader, below we sketcli a proof of Theorem ^ 
First, we consider locally symmetric spaces of rank one, and outline an 
argument that proves the claim in this case. It is substantially sim- 
pler than the argument for higher rank locally symmetric spaces; it is 
especially transparent for compact surfaces of constant negative curva- 
ture. Then we outline the argument for higher rank locally symmetric 
spaces, emphasizing the modifications and the difficulties that do not 
arise in the rank one case. 

Let rk(M) = 1. By there exists a closed geodesic, a C M, such 
that a n (F U {x, y}) = 0. Let A C be an infinite geodesic such that 
7r(A) = a. For e > 0, we will denote by T^{X) the e-tube about X; for 
X C M we set X = 7r-\X) C S. 

Since a is compact, there exists e > such that Te(y4) fl F = 0. Let 
pi E A, 1 < i,he a sequence of points going to infinity. Let x G n~^{x), 
let Zi = Sp.{x), and set 7i = [x, Let U = |7i| = d{x,Zi). We 
parametrize the geodesies 7^ so that 7i(0) = x,'~^i{li) = zi. 

By hyperbolicity, there exists p > such that 7i((p, k — p)) C T^^A) 
for all i. Thus, the geodesies 7, are contained in the e-tube about A 
except for, possibly, the first and the last segments of length at most p, 
where p does not depend on i. Let rj > 0, let Wi G B^{zi) be arbitrary, 
and set ■jun = [x,Wi]. Then the preceding claim holds for all geodesies 
7iu- if ?7 > is sufficiently small. Note that 7^ = 7^-. 

For T] > and 1 < i, we set SHiirf) = SH{x, Zi^rf) and SHi{ri,r) = 
SHiij]) n Br{zi). Thus, the sets SHiirf) and SHi{ri,r) are the shadow 
and the restricted shadow respectively, in our context. 

Since the curvature of S is bounded away from zero, the standard 
comparison arguments yield that for any 77 > there exists r > such 
that each SHi{r],r) contains a ball in 5" of radius diameter(M).Thus, 
7r{SHi{ri,r)) = M. In particular, the set SHi{r],r) contains a point 
jji G 7i~^{y). See figure n72\ 

The preceding constructions depend on the parameters 77, e > 0, and 
we can make them sufficiently small. Let y^, 1 < z, be as above, and 
set (3i = '7i{[x,yi]). By construction, G T{x,y), and 00. Also 

by construction. Pi belongs to Te(a) except, possibly, for the interval 
of length p in the beginning and the interval of length p + r at the end. 
Hence, if the geodesic Pi passes through a point / G F, it happens 
either during the first p or during the last p + r units of its lifespan. 

For any pair of points a, 6 G M, and any I > there is only a finite 
number of geodesies with endpoints a, b of length less than /. Therefore, 
at most a finite number of geodesies Pi, 1 < i, can intersect F. The 
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Figure 1. Construction of connecting geodesies in the 
rank one case 



remaining infinite collection of connecting geodesies (3i does not pass 
through F. This proves our claim in the rank one case. 

From now until the end of this subsection, we assume that rk(M) > 
2. Let A d S he a, F-compact flat of maximal dimension; thus 7r(A) C 
M is a maximal fiat torus. Unlike the rank one case, it is possible 
that Fi = 7i{A) n (F U {x, y}) ^ 0. Set F2 = (F U {x, y}) \ 7i{A), and 
let £ > be such that T^(vr(A)) n F2 = 0. Then T,{A) n F2 = 0; let 
X e 7r"^(x) \ A. 

Let (7 G F be a translation of A in a regular direction. See section 
for details. Let p G be an arbitrary point, and for —00 < i < 00 

set pi = g^p, Zi = SpXx). There is a geodesic, a C A, containing the 
points pi, —00 < i < 00. Let < 6 < e he such that Bs{p) fl F = 0. 
Then Bs{pi) n F = for all i. 

Let < 77. Set % = [x, Zi], and for arbitrary Wi G B^{zi) set 7^^,. = 
[x, Wj]. Note that 7^ = 75.. The regularity of 7 implies (see Lemma |21) 
that just as in the rank one case, the finite geodesies 7^^^ belong to Ti;{A) 
with the possible exception of their segments of uniformly bounded 
length, located in the beginning and at the end of each geodesic. 

By construction, for all i, the geodesic 7^ intersects A at a single 
point, pi ^ F. Apriori, a perturbed geodesic 7^- could intersect A at 
a point of F, jeopardizing our proof. A geometric argument based on 
considerations of symmetry and convexity, shows that if the intersec- 
tion 7^- n A is nonempty, then it is stable under perturbations. See 
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LemmaOl By this lemma, {'ju,^ (lA} C Bs{pi), implying that the inter- 
section point does not belong to F. Note that the proof of Lemma 01 
crucially uses that S" is a symmetric space. 

Extending the geodesies ju,. beyond the point Wi hj < r < oo, 
we obtain the sequence of restricted shadows SHi{x,ri,r) C S, 1 < i. 
We claim that there exists r such that for all i sufficiently large the 
projection vr : SHi{x,r],r) — M is surjective. In a symmetric space of 
rank one the diameter of any restricted shadow SH{x, t], r) grows with 
r at a uniform rate. Due to the existence of multidimensional flats, 
this fails in higher rank symmetric spaces. We will prove the claim 
using the uniform regularity of the geodesies ji, 1 < i, and the unique 
ergodicity of the horocycle flow on compact locally symmetric spaces of 
noncompact type. The latter is due to Hedlund [H] for compact surfaces 
of constant negative curvature, and to Veech in the general case. 
See Theorem 121 below. The surjectivity follows from Theorem |2l which 
we call the shadow lemma. We deduce it from Corollary Q of Theorem |21 
and a uniform convergence. See Lemma ^ 

The shadow lemma allows us to complete the proof of Theorem 
using the same argument as in the rank one case. Namely, we construct 
an infinite family of connecting geodesies Pi G T{x,y), iq < i. Each 
geodesic j3i does not encounter points of F, except for, possibly, during 
the first p or the last p+r units of its life span. By preceding argument, 
at most a finite number of the geodesies (3i can pass through F, contrary 
to the assumption that F is a blocking set for {x, y}. 

3.3. Horocycles and the shadow lemma. Our proof of Theorem |21 
crucially uses a result about the density of horocycles due to Hedlund 
and Veech. For convenience of the exposition, we formulate it below. 

Theorem 2. (Hedlund, Veech) 

Let M = r \ S be a compact locally symmetric space of noncompact 
type, and let ti : S ^ M he the projection. 

Let ^ e dooS he regular, let x E S he arhitrary, and let HC{^,x) C S 
he the corresponding horocycle. Then tt{HC{C,,x)) is dense in M. 

Remark 2. Hedlund j^j proved Theorem |21 for the hyperbolic plane. 
The general case follows from a theorem of Veech J3| about the unique 
ergodicity of horocycle fiows. 

Let HC{^,x) be a horocycle. For any r > we define the restricted 
horocycle HCr{^,x) = HC{^,x) fl Br{x). 

Corollary 1. Let M = T \ S he as ahove. For any e > there exists 
^0 = ''"o('S', r, e) > such that for all r > vq, any x & S, and any regular 
point C, G dooS, the set 7i{HCr{^,x)) is e-dense in M. 
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Proof. Let x & S and a regular point ^ G dooS be given. Let HC{^,x) 
be the corresponding horocycle. Then 7r{HC{C,,x)) is dense, by The- 
orem 121 Therefore, there exist an open neighborhood U C d^oS of 
^, an open neighborhood C S" of x, and a positive number p = 
p{^,x,e,U,V), such that Tr{HCp{(,y)) is e-dense in M for all C ^ 
and y E V. Using that F acts cocompactly, and Remark [H we obtain 
the claim. ■ 

Let 7 : R — s> 5 be a regular geodesic. Let 7(00) = ^ G dooS and 
7(0) = X. Let C G be the nilpotent subgroup with HC{^, x) = N -x 
as described in section IXTl Note that then HC{^,'-){t)) = N ■ ■y(t) for 
all t e M. 

Lemma 1. Let n E N . Then the geodesies 7(t) and n'-){t) converge 
exponentially for t — 00. The rate of convergence depends only on 
A^(7). 

Proof. We will use two well known formulas from the theory of Lie 
groups. For g E G and F G g we have gexp(Y)g~^ = exp{Ad{g){Y)); 
for X, y G we have Ad{exp{X)){Y) = e"'^(^)(F). 

We write ■y(t) = exp(tH) ■ x and n = exp(F) with Y = J2xeA+ 
Then 

d{n'y{t),'y(t)) = d{exp{Y)exp(tH) ■ x,exp{tH) ■ x) 
= d{exp{—tH)exp(Y)exp(tH) ■ x,x) 
= d{exp{Ad{exp{-tH)){Y))x, x) 
= d{exp{e^'^'^~'"\Y))-x,x) 

= d{exp{ J2 e''^^''^Yx)-x,x) 
AeA+ 

Since X{H) > Xq{^) > for all A G A+, the claim follows. ■ 

The following proposition, which is of independent interest, will be 
used in our proof of Theorem |H| For obvious reasons, we call it the 
shadow lemma. See figure ESI 

Theorem 3. Let M = T \ S be a compact, locally symmetric space of 
noncompact type. Then for any e, 77 > there exists R = R{S, F, 77, e) > 
so that the following holds. 

Let x,y E S be distinct points. Suppose that the geodesic 7 containing 
them satisfies A||(7) > rj. Then the restricted shadow SH{y,x,e) fl 
Bfj{x) has the property Tr{SH{y,x,e) fl Br{x)) = M. 
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HC{i,^{-r,)) 



7(-n) 



Figure 2. Shadow Lemma 



Proof. Let / = d{x,y) and let 7 : M ^ be the parametrization with 
7(0) = X and 7(Z) = y. Let ^ = 7(0x0) G c^ooS. Consider as above the 
nilpotent subgroup N C G with HC{^, 7(t)) = N ■ 7(t). For a > and 
t e R we define N{a, t) C N to be the subset such that 



In other words N{a,t) = {n e N : d{n'j{t),'j{t)) < a}. 

According to Corollary [TJ there exists tq = rQ{S,T,e/3) such that 
n{HCro{^,j{t))) is e/3 dense in M for all ^ G ^ooS and all t e R. 

We claim that there exists ri = ri{ri,ro,e/3) > such that 



To prove the claim, we assume that n ^ N \ N{e/3,0). This means 
that (i(n7(0), 7(0)) > e/3. By Lemma [TJ there exists ri depending 
only on 77, tq and e/3, such that (i(n7(— ri), 7(— ri)) > tq. Thus n G 
\ N{ro, — ri). This proves our claim. 

We set, for simplicity of notation, N^/^ = N{e/3, 0). The claim then 
implies 



Thus for any z G ifC.ro(^, 7(— ri) there exists n G A^/s such that 
z = n ■ 7(— ri). Then (i(n7(0),x) < e/3 and since the function t 1— >■ 
d{n'y{t),'y{t)) is convex and thus monotonously decreasing by Lemma^ 
we have d{n'^{l),y) < e/3. By the triangle inequality and the convexity 
of the distance function, [y, z] fl B2£/3{x) 7^ 0. Thus 



ifa(^,7(t)) = Ar(a,t)-7(t). 



N{ro,-n) cN{e/3,0). 



HCr,i^,j{-n)) cSHiy,x, 2e/3). 
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By convexity again 

B,/s{HCr,{^,j{-n))) C SH{y,x,e). 
The triangle inequality also implies that 

B,/s{HC,,{^,j{-n))) c Bn{x), 
where R = {ri + + e/3) = R{S, T, r], e). Hence 

B,/s{HCr,{^,j{-n))) C SH{y,x,e)nBR{x). 
Since 7r(iJCro(^, 7(— ri))) (e/3)-dense in M, this implies 
7iiSH{y,x,e)nBRix)) = M. 



3.4. Proof of Insecurity. In this section we prove Theorem ^ Let 
M = r\S he a compact, locally symmetric space of noncompact type, 
and let vr : S ^ M be the covering map. Let A G S he a F-compact 
flat. (They are dense in the set of all fiats ^21 Lemma 8.3].) Then A 
is totally geodesic and isometric to R'''^*^'^). Since A is F-compact, there 
exists a subgroup F^ ~ W^^^^ of F which operates by translations with 
a compact quotient on A. We also choose a point x G tt~^{x) with 
X ^ A and a point p G A such that p ^ F, where F = 7r^^(F). Since 
7r(A) is a closed subset of M, there exists a constant > such that 
(T2ej(A) \A)f]F = 0. Without loss of generality, we assume that 
4ei < d{x,A). Let g & he a translation in a regular direction. 
Hence, for any q E S the point limj^oo G doo{S) is regular. For 
i E N set pi = g^p G A. Since A and F are (^-invariant, and p ^ F, 
there exists 62 > such that i^^gfe) H F = 0. We assume without 
loss of generality that 62 < £1. Set Zi = Sp^{x), and 6j = d{x,pi). Let 
7j : R ^ 5* be the geodesic determined by 7j(0) = x and 7,(64) = pi. 
Then 7i(26i) = Zi. 

We will now state two lemmas, and derive Theorem ^ from them. 
Then we will prove the lemmas. 

Lemma 2. There exists p > such that for all i E N we have 
7.([P,6.])CT,,(A). 

Lemma 3. There exists £3 > such that for every point Wi G Bs,^{zi) 
either [x, Wi] D A = (/} or [x, Wi] HA is a point whose distance from pi is 
less than £2- In particular, [x, Wj] fl A fl F = 0. 
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Proof of Theorem^ Let 7^ be the geodesies defined above with 7j(0) = 
5, li{h) = Pi and 7i(26j) = 5j. By Lemma H 7i([p, 6^]) C T^^iA) 
and using the geodesic symmetry at pi, we see that 7j([p, 26j — p]) C 
Tirj^{A). Note that the geodesies 7^ converge to a hmit geodesic 700, 
with 7oo(0) = X and 700(00) = hmj^oofl'*(p) e 5oo(5'). Since 700(00) is 
regular, Ag (700) > 0. Thus, by passing to a subsequence, if necessary, 
we insure that there exists 77 > such that Xoi'^i) > f] for all i. We 
will use the number £3 of Lemma El assuming, without loss of gener- 
ality, that £3 < El. Let R = -R(S', F, 77, £3/2) > be the number from 
Theorem |21 

Then there exists jji G Bji{zi) f]SH{x, Zi,e3/2) with Tr{yi) = y. Let 
CTj : [0, ii] ^ M he the unit speed parametrization of the geodesic 
[x, ^j]. Then ii < 2bi + R + £3. Since [x,yi] comes £3/2 close to Zi, 
the triangle inequality implies d{ai{2bi) , 'yi{2bi)) < £3. By convexity, 
(i(crj (t), 7j(t)) < £3 for t G [0, 2fej], and since £3 < £1, we have (Jj([p, 26j — 
p]) C T2ej(y4). By Lemma El cTj does not intersect A at a point of F, 
thus ai{[p,2bi — p]) n F = 0. Hence, for p' = p + R + we have 
a,([p,£,-p'])nF = 0. 

The geodesies Ti = tt o ai : [0, £j] — > M connect x and By a dis- 
creteness argument, there are at most finitely many indices i such that 
ri([0, p]) n F 7^ or ri([£i - p', £i]) n F 7^ 0. We have thus constructed 
infinitely many connecting geodesies that do not meet F. ■ 

Proof of Lemma{^ Let uj = d{p,gp), and let 7 : M ^ A be the unit 
speed geodesic with 7(0) = p and 7(^01) = gp. Then 7 is the axis of 
the isometry g passing through the point p. Since g is a translation 
in a regular direction, 7 is a regular geodesic, i.e., all parallels to 7 
are contained in A. For z G N we have 7(«w) = g^p. Set c = d{x,p). 
Then (i(7j(0), 7(0)) = c, and by triangle inequality, d{'yi{bi),j{bi)) < c; 
thus by convexity, (i(7j(t), 7(t)) < c for all t G [0,6j]. For z G N set 
Tj : [0, 6i] — i> [0,00) be the function rj(t) = (i(7j(t),A). Since the 
curvature of S is nonpositive, these functions are convex, and since 
i^i{bi) = they are nonincreasing. In view of rj(0) = d{x,A) > 3si, 
there exists a unique pi G (0, 6j) such that ri(pi) = ei. 

It remains to show that there exists a p such that for alH G N we 
have Pi < p. Assume the opposite. Then, passing to a subsequence, if 
necessary, we have pi 00. Let Sj = pj/2 and let G N be such 
that I j{i)uj — Si \< ^. Then (i(7i(sj),Pj(j)) < c + ^. We reparametrize 
the geodesies g"^^^^ o 7|[o,pj] so that the parameter interval is [— Sj, Sj], 
thus obtaining 7* : [— Si,Sj] A, where 7*(t) = g~-'^^^ o 7(t + Si). By 
construction, 6/(7* (t), 7 (i:)) < c + | and £1 < d{'y*{t),A) < d{x,A). 
Hence, there is a converging subsequence 7* 7*, the limit geodesic 
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7* is defined on R. The function d{'y*{t),'y{t)) on R is convex and 
bounded, fience (i(7*(t), 7(t)) = d is constant, i.e., 7* is parallel to 7; 
since d ^ 0, the geodesic 7* is not contained in A. This contradicts to 
the regularity of 7. ■ 

Proof of Lemma\^ We will show that £3 = mm.{^^, ^} satisfies the 
requirements. Let Wi e B^^{zi) and assume that [x,Wi] fl A 7^ 0. Let 
7j : R — M be the unit speed geodesic with 7i(0) = x yjiibi) = pi and 
7j(26j) = Zi. Let cTj : R — ^ M be the unit speed geodesic with crj(O) = x 
and Wi = ai{di) for some di > 0. Since 7i(26j) = Zi, by construction, 
d{ai{2hi),-ii{2hi)) < 253, and by convexity, d{ai{t),'yi{t)) < 263 for 
t G [0, 26,]. Since [x, tUj] flA 7^ 0, there exists a unique point hi G [0, 26j] 
satisfying aiihi) G A. It suffices to show that | /ij — 6j |< y. Indeed, 
then d{ai{hi),pi) = d{ai{hi) , 'yi{bi)) < f + 26^ < 62- 

To prove the inequality | hi — hi |< we will use the functions 
fi{t) = d{ai{t), A) on R. Since A is invariant under the geodesic reflec- 
tion at the point ai{hi), the function is symmetric with respect to 
hi. 

The functions have the following properties: 

(1) fi is nonnegative, convex, 1-lipschitz, and symmetric with re- 
spect to hi] 

(2) f~^{0) = {hi} and for t > the set /^^(t) consists of two 
elements; 

(3) /,(0) > 4£i; 

(4) /,(p) < 2e,; 

(5) I f^{0)-f^i2h) |<2£3. 

Items (l)-(3) are obvious. To show (4), we note that d{'^i{p), A) < ei 
and d{ai{p),'^i{p)) < 26^ < ei, (5) follows from /j(0) = d{x,A) = 
d{zi,A) = d{-fi{2bi),A), and d{ai{2bi),-fi{2bi)) < 28^. 

By (1), (3) and (4), there is q G [ei, p] such that /i(cj) = S^i. By 
convexity, we have flit) < — — for < t < Cj. Hence, for < t < £1, 
we have the inclusion f^{[-t't]) D [/,(0) - t^,/i(0) + t'f]. By (5), 
fii^bi) G fi{[-t,t]) for t > Thus, there exists U, \ U \< 

such that fi{tj) = fi{2bi). By symmetry, hi = \{2bi + U), implying 
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4. Locally symmetric spaces of compact type 
We first recall the basics on symmetric spaces of compact type. 

4.1. Symmetric spaces of compact type. A (simply connected) 
symmetric space of compact type satisfies S = G/K, where G = 
^00(5") is a compact, connected, semisimple Lie group, and K C G 
is (essentially) the fixed point set of an involution a : G ^ G. The 
material of section 12.21 and much of that of section IH.ll applies, and we 
will use the notation established there. In contrast to section 13. H it 
is convenient to fix once and for all a reference point, o G S. Hence, 
we also fix the Cartan decomposition g = 6 + p, and the identification 
p = ToS. If p : G — > is the projection, then o = p{e) and K = p~^{o). 
Let s : S* — > 5* be the geodesic involution about o. Then a{g) = sgs. 

Our exposition does not depend on a G-invariant riemannian metric 
on S; for concreteness, we choose the metric < ■, ■ > corresponding 
to the negative of Killing form. As in section 13.11 Exp : p — »• 5* and 
exp : p — > G are the riemannian and the Lie group exponential maps 
respectively. They satisfy ExpX = p{expX), Exp{Adpk{X)) = p{k ■ 
expX). 

A (maximal) flat, B C S, is a. (maximal) totally geodesic subman- 
ifold, isometric to a fiat torus. The rank rk(S') is the dimension of a 
maximal fiat. Let A be the set of maximal abelian subalgebras in p, 
and let % be the set of maximal flats in S containing o. The mapping 
Exp yields a if-equivariant isomorphism between A and %; therefore 
the action of K on % is transitive. Hence, all maximal flats in S are 
isometric to a flat torus of dimension rk(S'). We will refer to the flats 
B E To a.s the maximal tori in 5*. We fix a reference Cartan subspace, 
a C p, and let A = Exp (a) be the reference maximal torus. (We also 
denote hj A C G the corresponding subgroup.) 

For X e S (resp. X G p) let To{x) C % (resp. A{X) C A) be 
the set of maximal tori (resp. Cartan subspaces) containing x (resp. 
X). A point X E S (resp. a vector X G p) is regular if its i^'-isotropy 
subgroup C K (resp. Kx C K) has minimal dimension. Then 
X E S (resp. X G p) is regular iff the set %{x) (resp. A{X)) consists 
of a single element. The set Sr of regular points in S (resp. the set 
pr of regular vectors in p) is i^-invariant. We refer to the elements of 
the complement S \ Sr (resp. of the set p \ pr) as singular points. The 
singular set S\Sr has a natural stratification. The maximally singular 
points X E S \ Sr satisfy = K. The finite set Z = Z{S) of these 
points is the center of the symmetric space jT2]. It depends on the 
reference point. Note that E Z, and Z = CiBeToB 
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Let X be a riemannian manifold, and let F C X be a closed sub- 
manifold. If x,y E Y we denote by Fy (x, y) C r(a;, y) the subcoUection 
of connecting geodesies that belong to Y. 

Lemma 4. Let x,y E S be arbitrary points, and let 7 G r{x,y). Then 
there exists a maximal torus B G S such that 7 C ry(x, y). 

Proof. By homogeneity, it suffices to establish the claim for 7 G 
r(o, x), where x G S" is an arbitrary point. By preceding remarks, 
7 = {ExptX, < t < I7I}, for some X G p. The vector X is contained 
in a Cartan subspace b C p. But the maximal torus B = Exp(b) is 
totally geodesic. ■ 

4.2. Group action and security. We will investigate the security 
of manifolds with a group action. In section 14.31 we will apply this 
material to symmetric spaces of compact type. 

Let M be a compact riemannian manifold. (It is not, in general, a 
symmetric space). Let U C Iso(M) be a closed, infinite subgroup. For 
X G M we denote by [/ ■ x C M the [/-orbit of x, and hj G U the 
isotropy subgroup of x. 

Let 7 be a geodesic in M, and let z G 7. If T^i^U ■ z) C T^M is 
orthogonal to 7 at z we will say that U acts transversally to 7 at the 
point z. The following is motivated by Definition 2.1 in 

Definition 3. A geodesic 'y G M is transversal (to the action of U) if 
U acts transversally to 7 at any point z G 'y. A collection F of geodesies 
in M is transversal (to the action of U) if every 7 G F transversal. 

A group acting on a manifold, naturally acts on the set of configu- 
rations. Extending the notation above, we will denote this action by 
u ■ {x, y}. Then U ■ {x, y} is the [/-orbit in the space of configurations. 
A configuration {x, y} is fixed if U ■ {x, y} = {x, y}. If U is connected, 
then {x, y} is fixed iff both x, y are fixed points. 

Proposition 3. Let M and U be as above; let {x,y} be a configuration 
such that T{x,y) is a transversal collection of geodesies. 
If fixes the configuration {x,y}, then {x,y} is secure iff it has a 
blocking set that consists of U^-fixed points. 

Proof. We will assume, for convenience of exposition, that U is 
connected and that the isotropy subgroups Uz are connected for all 
z G M. The general situation reduces to this case case by passing to 
the identity components of relevant groups. We normalize the double- 
invariant riemannian metric of U such that the mappings g g ■ z, etc 
do not increase the relevant distances. Let X be a complete, riemannian 
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manifold, and let y C X be an arbitrary subset. For r > and z ^ X 
we denote by F (r, z) the intersection of Y with the open ball of radius 
r in X centered at z. 

Let X C M be the set of ?7-fixed points. Then x,y & N and the 
collection r{x,y) is ^/-invariant. Let B he a minimal blocking set. It 
suffices to show that B C N. Suppose that this fails, and set Bq = 
B n N, Bi = B \ Bq. By assumption, Bi ^ 0. By minimality of B, 
there exists 7 G T{x,y) such that 7 does not pass through Bq. Let 
Zi, . . . ,Zm be the points of Bi contained in 7, and let f/i, . . . , Um C U 
be their isotropy subgroups. They are proper subgroups of U, hence 
Q = U \ {Ui U ■ ■ ■ U Urn) C f/ is a dense open set. 

We define the mapping ip : U ^ M"^ (the m-fold product) by ip{g) = 
[g ■ Zi, . . . , g ■ Zm)- Denote by X C the subset given by conditions 

X = {{wi, Wm) ■■ Wi Zi, 1 < i < m.} 

Then is a differentiable map, ip{U{e,e)) C M"^{{zi, . . . ,Zm),s), and 
ip{Q n U{e, e)) C M™((zi, . . . , Zm),e) n X . 

Let < t < I7I be the natural parameter, and let < ti < ■ ■ ■ < 
tm < \l\ be given by 7(^1) = Zi, 1 < i < m. Let £ > be arbitrary. For 
any g G U{e,e) the geodesic ■ 7 G T{x,y) is e-close to 7 (pointwise). 
Since _B is a finite set, the distance 6 = d{^,B \ {zi, . . . ,-2^}) > 0. 
Hence if e < 5/2 and g & VLC] f/(e, e), then the geodesic g ■ 7 does not 
pass through the points of -B \ {^i, . . . ,-2^}- By preceding remarks, 
if < £ is sufficiently small and g E Vtr\ U{e,e), then g ■ 7 does not 
pass through the points Zi, 1 < i < m, either. Thus, for any g E Q 
and sufficiently close to the identity, the geodesic (7 ■ 7 G T{x,y) is not 
blocked by B. Hence, contrary to the assumption, B is not a blocking 
set. ■ 

The following consequence of Proposition El will be useful. 

Corollary 2. Let M be a compact riemannian manifold, and let U be 
a compact Lie group of isometrics of M. Denote by N G M the set of 
U^-fixed points. 

Let {x,y} be a configuration such that T{x,y) is transversal to the 
action of U. 

1. Let x,y E N. Suppose that {x,y} is a secure configuration, and let 
B G M be a blocking set. Then B (1 N is a blocking set as well. 

2. Let \U ■ {x,y}\ < 00. Then the configuration {x,y} is secure iff it 
has a U -invariant blocking set. 

Proof. The first claim was actually obtained in the proof of Propo- 
sition 01 Set X = ([/•x)U ([/■?/). The set X is finite, and, by 0, {x, 
is secure iff the collection r(X) of geodesies connecting the points of X 
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has a finite blocking set. Since X G N, the second claim now follows 
from the first. ■ 

Let M be as above, and let K be an infinite, compact group, prop- 
erly acting on M by isometries. ( Equivalent ly, K C Iso(M).) We 
will say that a geodesic 7 (resp. a collection F of geodesies) in M 
is K -transversal if 7 (resp. any 7 G F) satisfies the requirements of 
Definition El 

The following theorem connects the preceding material with our main 
subject. 

Theorem 4. Let M be a compact riemannian manifold, and let K he 
an infinite, compact group, properly acting on M by isometries. Let 
F (Z M be the set of Kq- fixed points. 

Suppose that F is a finite, nonempty set. Then the manifold M is not 
secure. 

Proof. Let 7 C M be any geodesic. By, Proposition 2.2 of 
7 is i^"-transversal iff K acts transversally to 7 in at least a point, 
2 G 7. (The point in question may be an endpoint of 7 as well.) 
The transversality condition is trivially satisfied if z G -F. Hence, any 
geodesic intersecting F is ii"-transversal. 

Let {x, y} be a configuration such that {x, fl F 7^ 0. By pre- 
ceding remarks, T{x,y) is i^'-transversal. We will now specialize to 
configurations {x, y} such that both x,y E F, and consider two cases. 

1. Let \F\ = 1, and set F = {x}. By Proposition El the configuration 
{x, x} is insecure. 

2. Let \F\ > 1, and let x G -F be arbitrary. Let y G -F be a point, 
different from x, and such that the distance d{x, y) is less than or equal 
to d{x,y'),y' G F, for all y' 7^ x. By Proposition |S1 the configuration 
{x,y} is secure iff every geodesic in T{x,y) passes through F. Let 
7 G F(x, y) be a geodesic such that I7I = d{x,y). By construction, 7 
does not pass through F. 

Thus, in both cases M has an insecure configuration. ■ 

4.3. Secure and insecure configurations. We will use the notation 
of section Wl\ Let 5* = G/K be a symmetric space of compact type, 
and let o G S* be the reference point. Following [T], we classify the 
points of S by dimensions of their ii'-orbits. Regular points x G S" are 
such that K ■ x has the maximal dimension, r = r{S). The defect of a 
point is defined by 6{x) = r{S) — dim(i^ ■ x). See Definition 7.1 in IJ. 
Thus, X G is singular iff S{x) > 0. The maximal possible defect is 
r{S), and the set of maximally singular points is the center Z G S. The 
K-stabilizer, L (Z K, of a. regular point is determined up to conjugacy. 
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hence 1{S) = dim(L) is well defined. Note that dim{K) = 1{S) +r{S). 
Let now {x,y} G C{S) be a configuration. The mapping {x,y} i-^ 
Gx n Gy is equivariant with respect to the natural actions of G. Let 
g E G satisfy g ■ x = o, and set g ■ y = w. Then 

dim(G^. n Gy) = dim{K n G^) = dim{K^). 

Definition 4. The defect of a configuration is given by 

(3) 6{{x,y}) = dim{G,nGy)-liS). 

A configuration {x, y} is regular if 6{{x, y}) = 0, and singular if 
6{{x,y})>0. 

We formulate the basic properties pertaining to the regularity of 
configurations in the proposition below. 

Proposition 4. Let S = G/K be a symmetric space of compact type, 
let a & S be the reference point, and let A be a reference torus. Let 
{x,y} G G{S) be arbitrary. 

1. The defect of a configuration is invariant with respect to the action 
ofG onC{S). We have 

Q<5{{x,y})<r{S). 

2. The configuration {x,y} is regular iff there is a unique maximal 
torus containing x, y iff {x, y} is conjugate to {a, a} where a E A is a 
regular point. 

3. The configuration {x,y} is singular iff {x,y} is conjugate to {o,a} 
where a E A is a singular point. 

4. The equality 6{{x,y}) = r{S) holds iff G^ = Gy iff {x,y} is conju- 
gate to {0, z} where z E Z . 

Proof. The claims readily follow from the preceding discussion and 
the standard material 01101 1121 • ■ 

If S{{x, y}) = r{S), we will say that the configuration {x, y} is max- 
imally singular. 

Theorem 5. Let S be a symmetric space of compact type. 

1. Any regular configuration in S is secure; it has a blocking set of 
2rKS) points. 

2. There exist maximally singular configurations in S that are insecure. 

Proof. 1. Let {x,y} be a regular configuration, and let B be the 
unique maximal torus containing X, ?/. See Proposition 0] By Lemma |3J 
r(x, ?/) = VB^x^y). By Proposition E[ a fiat torus of r dimensions is 
uniformly secure; its security threshold is 2^. 
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2. In view of Proposition |3J it suffices to consider the configurations 
{x, y}, wliere x,y E Z. Our setting satisfies the assumptions of Theo- 
rem 0] (with F = Z), which imphes the claim. ■ 

Corollary 3. Let M be a locally symmetric space of compact type. 
Then almost all configurations in M are secure. However, M always 
has insecure configurations as well. 

Proof. The space M has a finite covering q : S —>■ M, where S is 
a symmetric space of compact type, and g is a local isometry. The 
Lebesgue measure on the space of configurations in M is the image 
under of the corresponding measure in S. Regular configurations in 
S form a subset of full measure. The claims now follow from Theorem^l 
and the basic facts concerning security and coverings 0. ■ 

We will now illustrate preceding propositions with a few examples. 
First, we consider the case of symmetric spaces of rank one. 

4.4. Example: Security for symmetric spaces of rank one. Let 

5* = G/K be a symmetric space of rank one, and let o E A G S he 
the reference point and the reference torus. Then A is a circle; let 
a' be the antipodal point of a G A. A point x G S* is either regular 
or maximally singular. There are two possibilities: Z = {a}, or Z = 
{a, a'}. Theorem El and Proposition 0] show that in the former case the 
configuration {o, a} is insecure, while in the latter case {a, a} is secure, 
and {a, a'} is insecure. 

Let us investigate the security of general configurations in S. If 
\Z\ = 2 then the involution a ^ a' extends by homogeneity to all 
of S. Thus, we have the antipodal involution x ^— x', and it satisfies 
g-x' = (g-x)'. Then the antipodal configurations {x, x'} are insecure; all 
other configurations are secure. If |^| = 1 then the antipodal involution 
on S does not exist. The insecure configurations are {x,x}, and all 
other configurations are secure. 

Compact symmetric spaces of rank one are listed in [llj, p. 518 and 
p. 535. We will now illustrate the preceding discussion by briefly going 
over the list. 

The round sphere S'^, n > 1. (The space is of euclidean type.) We 
have \Z\ = 2. The notion of antipodal points x',x G S"" is classical. 
The only insecure configurations are {x, x'} where x is arbitrary. All 
of the geodesies in the continuum r(a;, x) are blocked by x'. 

The real projective space MP", n > 1. (Note that MP^ = S^.) Here 
\Z\ = 1, and the insecure configurations are {x,x} where x G S"" is 
arbitrary. For all configurations {x,y} with x ^ y the set V{x,y) is 
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finite. Note that is a double covering of MP". Denote tlie antipodal 
involution hj a : S"' 5". Tlien MP" = S'^/a. Tlie remarks above 
illustrate Corollary [TJ 

The complex projective space CP", n > 1. (The case n = 1 is ex- 
ceptional, and CP^ = 5^.) Now \Z\ = 1, hence the only insecure 
configurations are {x, x} where x G CP" is arbitrary. Just like for 
MP", only for these configurations the set of connecting geodesies is 
infinite. Note that CP" is simply connected, and dim(CP") = 2n. 

The quaternionic projective space HP", n > 1. (The case n = 1 is 
already disposed of, since HP^ = 5"^.) The space is simply connected, 
dim(EIP") = 4n. Again, \Z\ = 1, and the only insecure configurations 
are {x,x} where x G HP" is arbitrary. Just like for MP", CP", these 
are the only configurations for which the set of connecting geodesies is 
infinite. 

The unique exceptional compact symmetric space of rank one: The 
space F II. See [TT] (pp. 516, 518) and [T7j. The isometry group 
of the space F II is P4: The compact, connected Lie group with the 
Lie algebra f^. We have dim(P II) = 16 and dim(P4) = 52. Also in 
this case \Z\ = 1. Indeed, the existence of an antipodal map x ^ x', 
would imply the existence of an antipodal map for every connected 
totally geodesic submanifold. Since MP^, CP^ and HP^ occur as totally 
geodesic subspaces ([17], Lemma 4), this is not the case. 

Our next example concerns compact Lie groups viewed as symmetric 
spaces. 

4.5. Example: Security for compact semisimple Lie groups. 

Let K he a compact, connected, semisimple Lie group. Let < ■, ■ >fc 
be a riemannian metric on K which is both left-invariant and right- 
invariant. We will call these metrics double- invariant. A double- 
invariant metric is determined by its restriction, < -, ■ >e, to the 
tangent space Tf.{K) ~ which is a Ad(-ft')-invariant inner product. 
Conversely, any Ad(fr)-invariant inner product < ■, ■ > on t uniquely 
extends to a double-invariant riemannian metric on K. Although such 
inner product is not unique, in general,^ the results below are valid for 
any double- invariant metric. In the standard example, < ■, ■ > is the 
negative of the Cartan-Killing form. 

We will regard K both as a group and as a symmetric space. To 
avoid confusion, we will denote the latter by [K]. The group K x K 
acts on [K] via (ki, ^2) ■ [k] = [ki k A;^"*^]. The isotropy group of [e] is the 
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diagonal subgroup {{k,k) : A; G K} G K x K, and we denote it by K 
as well. Thus, [K] = {K x K) / K, and o = [e]. Let Z G K he the center 
of the group, and let Z{[K], [e]) be the center of the symmetric space. 
Then Z{[K], [e]) = [Z]. The mapping A ^-^ [A] provides a one-to-one 
correspondence between the set of Cartan subgroups of K and the set 
7[e]([ii']) of maximal tori in [K] containing the reference point. Hence 
Yk{K) = rk{[K]). 

Set rk = rk(i^) = rk([iC]). An element k G K is regular (resp. 
singular) if dim(ker(Ad(A;))) = rk (resp. dim(ker(Ad(A;))) > rk). By 
discussion above, a point [k] is regular (resp. maximally singular) in 
the sense of Definition 0] iff the group element k is regular (resp. k G 
Z). Let {[ki], [k2]} be an arbitrary configuration in [K]. In view of 
the preceding remarks, {[ki], [k2]} is a regular configuration (resp. a 
maximally singular configuration) iff fciA;^^ G -ft' is a regular element 
(resp. k2 = z ki, where z G Z.) 

The preceding discussion and Theorem^lyield the following corollary. 

Theorem 6. Let K be a compact, connected, semisimple Lie group en- 
dowed with a double-invariant riemannian metric. Then the following 
holds: 

1. Any configuration {/ci,/c2} such that fci/c^^ is a regular element of 
K is secure; it suffices 2^'^^^^ points to block all connecting geodesies; 

2. There exists an element z G Z of the centre of K such that any 
configuration {fc, zfc} is insecure. 

5. General compact, locally symmetric spaces 

We begin with a general proposition. It is of interest by itself; we 
will also use it in the proof of Theorem [7| 

Proposition 5. Let X (resp. Y ) be a (resp. compact) riemannian 
manifold, and let f : Y X be a local isometry. (We do not assume 
that f is onto.) If the space Y is insecure, then X is insecure as well. 

Proof. Let {yi, ^2} C F be an insecure configuration. We will show that 
{xi = f{yi),X2 = f{y2)} C X is also an insecure configuration. The 
mapping / sends geodesies in Y into geodesies in X. Let Tf{xi,X2) C 
r(xi, X2) be the set of connecting geodesies of the form 7 = /(7), where 
7 G r(?/i,|/2). Suppose that {xi,X2} is a secure configuration, and let 
F C X be a blocking set. In particular, F blocks the geodesies in 
Tf{xi,X2)- Set F = f~^{F). Then F C F is a finite set, and it blocks 
all geodesies in T{yi,y2), contrary to our assumption. ■ 
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Let X, Y be riemannian manifolds. We denote by X xY the product 
manifold endowed with the product metric. To be precise, if {x, y) G 
X X F, then T(^,j,)X x F = T^X © TyY . 

Corollary 4. Let X, Y he arbitrary riemannian manifolds. 

1. If the space X xY is secure, then both X,Y are secure. 

2. Suppose that Y G X is a totally geodesic submanifold. If Y is 
insecure then X also is. 

Proof. The first claim follows from the second; the argument of Propo- 
sition El proofs the second claim. The compactness of Y was used in 
the proof of Proposition only to insure that \F\ < oo. In our setting 
F = F, hence it is a finite set. ■ 

We will now turn to the security of general locally symmetric spaces. 
In order to avoid confusion, we will modify our notation for the sets 
of connecting geodesies. Namely, we denote by G{x, y) etc the set of 
connecting geodesies for the configuration {x,y}. 

Theorem 7. Let M be a compact, locally symmetric space. Then M 
is secure iff it is of euclidean type. 

Proof. Let M = V \ S , where S = M and F C ^0(5") is the group of 
deck transformations. Let p : S ^ M he the covering map. 

The general simply connected, symmetric space has a unique de- 
composition S = So X X S+ lOj, where some of the factors may be 
trivial, li S = Sq x S^, e. g., we will say that the factor S+ is not 
present. In view of Proposition |21 it suffices to show that if S'_ or S+ 
are present, then M is insecure. 

We will first show that the presence of implies the insecurity of M. 
Assume the opposite. Then S = S^ x Z . Let z E Z he arbitrary. The 
restriction of p : — *• M to 5+ x {z} c 5 satisfies the assumptions of 
Proposition |S1 Hence, by Theorem El and Proposition |31 M is insecure. 

In view of Theorem ^ it remains to show that if 5* = Sq x S-, 
then M is insecure. In fact, we will prove that any configuration in 
M is insecure. For notational convenience, we set S^ = Si. Note that 
S = Sq X Si is a Hadamard manifold, and that 5*0 is the euclidean de 
Rham factor. 

For z = 0, 1 let gj : S* ^ Si (resp. pi : T ^ ISO{Si)) he the natural 
projections, and set Fj = Pi(T). By the results of P. Eberlein there 
exists a finite index subgroup F' C F, such that F'^^ = pi(F') is a dicrete, 
fixed point free, cocompact group of isometrics of 5*1. 

Set M' = V \ S. The inclusion F' C F yields a finite covering vr : 
M' — > M. By Proposition^ it suffices to show that every configuration 
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in M' is insecure. Hence, we assume from now on that the group F 
itself satisfies the conditions above, and suppress the "prime" from our 
notation. 

Let {xq^Xi) 7^ {yo,yi) E So X Si be arbitrary points. We will use 
the notation of section ITT] for the unique geodesic, connecting a pair of 
points of a Hadamard manifold. The geodesies [a;o,?/o] C 5*0, C 
5*1, and [(xq, xi), (?/o, l/i)] C Sq x Si satisfy qoiiixo, xi), {yo,yi)]) = 
[xo,yo], qi{[{xo,Xi),{yo,yi)]) = [xi,yi\. There exist (unique) linear 
parametrizations Zo(t), zi(t) of the geodesies [xq, yo], [xi, yi] respectively, 
such that (-20 (t), Zi(t)) is the arclength parametrization of the geodesic 
[(xo,xi), iyo,yi)]- 

Let {p{xo,xi),p{yo,yi)} C M be an arbitrary configuration. Sup- 
pose that it is secure, and let F C M be a blocking set. Then for 
every 7', 7" G F the geodesic [y' {xq, xi) , Y {yo, yi)] C S passes through 
a point of F = p'^{F). Let 7^' = Pj(7'))7i' = Piil"), where i = 0,1. 
Then, by preceding remarks, every geodesic [7j^(xi), 7"(yi)] C Si passes 
through a point of qi{F). 

Let Ml = Fi \ 5*1, and let pi : Si ^ Mi be the covering map. The 
set F C 5 is a finite union of F-orbits. The projection qi : S ^ Si 
sends F-orbits onto Fi-orbits. Thus, qi{F) C 6*1 is a finite union of 
Fi-orbits. Hence, qi{F) = p^^{Fi), where Fi C is a finite set. 

Let G be the set of geodesies in Si given by G = {[71(2^1)) 7i(l/i)] • 
7i,7i G Fi}. Then G = Pi^{G{pi{xi),pi{yi))). We have observed that 
every geodesic in G passes through a point of the set qi{F) = Pi^{Fi). 
Since < 00, the set Fi C Mi is a blocking set for the configuration 
{{pi{xi) , pi{yi)} . But this contradicts to Theorem [T] ■ 

We conclude by another characterization of (uniformly) secure, com- 
pact, locally symmetric spaces. It is immediate from Theorem [7| and 
Proposition |21 

Corollary 5. Let M" be a compact, locally symmetric space. Then the 
following claims are equivalent: 

1. The space M^ is secure; 

2. The space M^ is uniformly secure. Its security threshold is bounded 
by a constant that depends only on n; 

3. The space M^ is covered by a fiat torus. 
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